# FruityC2 | Tool To Control and Manage Agents From Server With Web Interface

**URL:** <https://onehack.st/t/fruityc2-tool-to-control-and-manage-agents-from-server-with-web-interface/203300>\
**Category:** Tools & Scripts\
**Tags:** hacking, operating-system, technology, hosting\
**Created:** [October 5, 2021, 2:08am UTC](https://onehack.st/t/fruityc2-tool-to-control-and-manage-agents-from-server-with-web-interface/203300 "2021-10-05T02:08:30Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\
**Post date:** [October 5, 2021, 2:08am UTC](https://onehack.st/t/fruityc2-tool-to-control-and-manage-agents-from-server-with-web-interface/203300/1 "2021-10-05T02:08:30Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/5/c/5ce71ed3e198efaa643e3c2124e5cec541198e12.png)

# FruityC2

This is the initial release for FruityC2 (alpha version). Can be installed on any linux system, but the installation scripts are made for Debian based systems. There are a lot of functionalities that will be include in future releases, and probably a lot of code will be changed, but this version is enough to show FruityC2.

FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.

It works as a command-and-control model and is language and system agnostic. New agents are being developed to expand the capabilities and options for FruityC2.

A web client is used to interact with the FruityC2 API in a client/server mode. The client is a single web page divided into 5 sections: Interact, Listener, Payload, Delivery, Config. These options provide full control and access to the functions included in FruityC2 to create, deliver and interact with a functioning C2 capability.

During the development of the initial alpha version, I divided the efforts between the client and the server, but mainly on the client.

The next steps are to improve the Stager and Agent, add more functionalities and commands, and I will start developing new stagers and agents for other OS systems.

Note: The current Stager and Agent can be only executed on Windows (powershell), but this will be extended in future releases to other systems and file types.

## Install

script: [install.sh](https://github.com/xtr4nge/FruityC2/blob/master/install.sh)  
**Note** : you need to download the master.zip file or to clone the repository (FruityC2).

- You need Debian (or based) installed (or a Live CD version) to use this script.
- Download the zip file from [https://github.com/xtr4nge/FruityC2/archive/master.zip](https://github.com/xtr4nge/FruityC2/archive/master.zip)
- Unzip the file and run **install.sh** (This script will install all the dependencies)
- Done.

## FruityC2 Server

Edit the file `config/settings.conf` and add the IP (from where FruityC2-Client will be used) in section:  
`[souce][[control]]`  
`allow = '127.0.0.1', '10.0.0.0/24', 'fruityc2-client-ip'`

Then run `./FruityC2.py`

client: **https://{FruityC2-IP}:50000/login**  
user: **admin**  
pass: **admin**

## FruityC2-Client Wiki

> **[Home](https://github.com/xtr4nge/FruityC2/wiki)**
>
> FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator. - xt...

[![](https://camo.githubusercontent.com/7182d9e78d6b8b5db9e10b48c60cb9327123803afa9eb04f084ac40634612892/687474703a2f2f692e696d6775722e636f6d2f655359557738582e706e67)](https://camo.githubusercontent.com/7182d9e78d6b8b5db9e10b48c60cb9327123803afa9eb04f084ac40634612892/687474703a2f2f692e696d6775722e636f6d2f655359557738582e706e67)

## Extra Scripts

### download-modules-extra.sh

This script can be used to download extra modules from the projects: [Empire](https://github.com/adaptivethreat/Empire), [PowerSploit](https://github.com/PowerShellMafia/PowerSploit), [PowerShell-AD-Recon](https://github.com/PyroTek3/PowerShell-AD-Recon) and [Nishang](https://github.com/samratashok/nishang)

### reset.sh

This script can be used to backup the data, logs and config files to then reset the server data.

## GitHub:

> **[GitHub - xtr4nge/FruityC2: FruityC2 is a post-exploitation (and open source)...](https://github.com/xtr4nge/FruityC2/)**
>
> FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.